Okay, here are my first personal thoughts about/ experiences with AE:

-> till now not intuitive enough
-> AE should adopt the admin-rules for Browser/ OE/ MP, otherwise you have to tune everything again
-> the direct login into dshield (ISC) out of "CVTWIN Client" from AE-protected admin-account took place with the normal (!) standard-browser